How to setup the trunk for private vlans across 2 switches (Both are SF300-24)

[peterliu101]

Dear All,

I have 2 switches which are SF300-24.

Switch 1 is connected to Internet Router for all clients on swith1 and switch 2.

The clients on switch 1 & switch 2 don’t communicate each other.

Port1~Port24 on switch 1 & switch 2 are isolated ports.

Gigaport1 on switch1 is connected to gigaport1 on switch2.  

Gigaport2 on switch2 is connected to Internet Router.

The VLAN 100 is for isolated ports.

The native VLAN is 1.

Please help me how to configure the case. Thanks for your help.

[V K Moorthy]

Hi,

Configure the Gi1 port of switch1 and switch 2 with Trunk and allow VLAN 1U,100T

regards

Moorthy

[peterliu101]

SF300-24 doesn't support the command "switchport mode private-vlan trunk promiscuous".

 I have a question whether  Normal trunk can carry PVLAN traffic.

[Aleksandra Dargiel]

Hi Peter,

You can do it:

•To allow this, all relevant switches must have the same PVLAN VLAN association

•The inter switch port(s) between relevant switches must be configure as follows:

Trunk (or general) mode ports

Primary VLAN, Community VLANs and the Isolated VLAN are configured as tagged VLANs on these interfaces

•This will allow PVLAN traffic to flow as “marked” VLANs across the switches and will be handled appropriately on PVLAN ports on neighboring switches

So as per Moorthy suggestion regular trunk on uplink would work as expected.

Regards,

Aleksandra

[Tom Watts]

I think he's just looking for PVE.  You can enabled 'protected port' on a port by port basis.

Here's the excerpt from the admin guide.

Protected Port

—Select to make this a protected port. (A protected port is

also referred as a Private VLAN Edge (PVE).) The features of a protected port

are as follows:

-

Protected Ports provide Layer 2 isolation between interfaces (Ethernet

ports and LAGs) that share the same VLAN.

-

Packets received from protected ports can be forwarded only to

unprotected egress ports. Protected port filtering rules are also applied

to packets that are forwarded by software, such as snooping

applications.

-

Port protection is not subject to VLAN membership. Devices connected

to protected ports are not allowed to communicate with each other, even

if they are members of the same VLAN.

[mohdilyasali]

above mentioned issued has been same , error also coming %BOOTP_DHCP_CL-I-DHCPRENEWED: The device has been renewed the configuration on interface Vlan 1 , IP 10.20.20.1, mask 255.255.255.0, DHCP server 10.20.20.100

could you please help to sort out issue...

one more can access web page of switch but not showing all option and switches avaliable in branch so far i wants access from head office and it is reachable...

this is my email : mohdilyas_ali@yahoo.co.in

adv thanks